Nmap Development mailing list archives

[patch] version scan - lotus notes (1352/tcp) pattern update


From: Martin Mačok <martin.macok () underground cz>
Date: Thu, 12 Aug 2004 10:09:11 +0200

I've seen CN names with spaces in their name.

Martin Mačok
IT Security Consultant


--- nmap-service-probes.3.55    2004-07-07 08:08:09.000000000 +0200
+++ nmap-service-probes 2004-08-10 16:03:00.000000000 +0200
@@ -1789,7 +1789,7 @@
 # Lotus Notes domino 5.0.11
 # Lotus Server 6.0.1
 # Lotus Domino (r) Server (Release 6.0.1CF1 for Windows/32
-match lotusnotes 
m|^.\0\0\0.\0\0\0\x03\0\0@\x02\x0f\0.\x009......\x03\0\0\0\0\x02\0/\0.\0\0\0\0\0\0\0@\x1f.*CN=([-.\w]+)/O=([-.\w]+)[^-.\w]|s
 v/Lotus Domino server//CN=$1;Org=$2/
+match lotusnotes m|^.\0\0\0.\0\0\0\x03\0\0@\x02\x0f\0.\x009......\x03\0\0\0\0\x02\0/\0.\0\0\0\0\0\0\0@\x1f.*CN=([-.\w 
]+)/O=([-.\w]+)[^-.\w]|s v/Lotus Domino server//CN=$1;Org=$2/
 ##############################NEXT PROBE##############################
 Probe UDP Sqlping q|\x02|
 ports 1434

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org



Current thread: